7 Minute Security

Latest Episodes:

7MS #130: Sqlmap and Sqlninja FTW Dec 29, 2015

Show notes

This episode talks about some fun I had using sqlmap, and how using it in conjunction with Sqlninja makes me happy to be alive.

7MS #129: Embarrassing Stories Dec 27, 2015

Show notes

In this episode I talk about face-planting in my office at the first job I had out of college.

7MS #128: Transparency is King Dec 27, 2015

Show notes

In this episode, I talk about a restaurant infosec assessment I did, and how the recommendations coming out of that assessment didn't fit the standard "mold." I also talk about how being transparent and helpful - and NOT billing clients for every tiny little thing - is king.

7MS #127: Intro to HIPAA Assessments Dec 27, 2015

Show notes

This episode covers a few HIPAA tidbits I picked up while preparing for - and executing - a HIPAA security assessment.

7MS #126: Get Your Name Out There Dec 24, 2015

Show notes

This episode isn't about infosec exactly, but it talks about how using public resources like LinkedIn, Twitter and blogs to boost your "brand" (though I hate that word) and help you get more connected to the infosec community, job leads and more!

7MS #125: Securing Your Life-Part 2 Dec 23, 2015

Show notes

Way back in episode #93, I talked about things you can do to secure your life (mortgage review, adequate insurance, estate planning, investments, etc.).

This episode continues that train of thought and covers: getting the right amount of life insurance, getting the right home/auto coverage, as well as estate planning.

7MS #124: Sprinkles Dec 23, 2015

Show notes

This episode is 90% a rant about how annoying carry-on luggage and air travel can be, and a 10% sprinkling of security sauce mixed in. Hence: sprinkles.

7MS #123: Doing a Redo Assessment Dec 22, 2015

Show notes

This episode talks about my experience in doing a "redo" security assessment, during which I struggled with the following questions: what's the best way to efficiently correct the erroneous information and make the customer happy without asking ALL the original questions over again? Especially when I have little to no time to prepare for the "redo" interview?

7MS #122: OFFTOPIC-An Apology to Elephants Dec 20, 2015

Show notes

Preview76 wordsThis episode is about a documentary called An Apology to Elephants. It's all about the treatment (or mistreatment) of elephants, and the main message of the movie is, "Please don't go to the circus when it's in town, because you're supporting elephant abuse." Even if that message was a little heavy handed, I certainly will pass on tickets next time a circus act comes through town.

You can subscribe to the 7 Minute Security podcast here.

7MS #121: Migrating from Tumblr to Ghost-Part 2 Dec 19, 2015

Show notes

Part 2 concludes my journey in moving 7ms.us from Tumblr to a Digital Ocean droplet running Ghost. Here are the key resources mentioned during the podcast:

How to run multiple Ghost blogs on one DI VPS. The key takeaway here was that I had to upgrade to the $10 droplet (I did a "flexible" resize to add more proc/memory) and then the second instance of Ghost installed fine.
Turning on CloudFlare SSL was easy. I chose flexible SSL since I wasn't using a "real" cert. I also wrote a rule to force HTTPs for all connections. And, just for grins, I turned on DNSSEC. Because...why not? :-)
I picked a strong root password for my DI droplet, but I still don't like the idea of IPs banging on that connection all day and night. I followed this article on installing Fail2Ban to prevent my SSH login from being abused.
- There are a few IPs that I want to perma-ban, so I'm going to look throughthis article and this one which looks a tad easier.

You can subscribe to the 7 Minute Security podcast here.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected